POPI IMPLEMENTATION PLAN
- POPI leaves much to interpretation.
- It says that companies must provide a “reasonable and practicable” level of protection for personal information, for example, but does not define what constitutes “reasonable and practicable.”
- This gives the Information Regulator, the governing body for POPI and PAIA, a lot of leeway when it comes to assessing fines for data breaches and non-compliance.
- Paragraph 4(1)(a) of the Regulations under the POPI Act regulates that an information officer must, in addition to the responsibilities referred to in section 55(1) of the Act, ensure that a compliance framework is developed, implemented, monitored and maintained.
What is a privacy compliance framework?
POPI requires organisations to implement “appropriate technical and organisational measures” to secure the personal information they process. They must also follow the accountability condition. This means being responsible for, and able to demonstrate their compliance with, the Act’s conditions for the lawful processing of personal information..
This can best be achieved, and is legally required, via a privacy compliance framework: a formal structure for managing the security of personal information. Implementing a privacy compliance framework will demonstrate to the Information Regulator’s office that you have carried out due diligence and are doing all you can to comply with the law.
CAN YOU IMPLEMENT POPI YOURSELF?
- You really can implement POPI by yourself.
- All you need is Assent Compliance’s POPI COMPLIANCE FRAMEWORK DOCUMENTATION TOOLKIT, along with included guidance and support. Our toolkit were developed for ease of use and to be understandable, with no expert knowledge required.
- We eliminate the stress and headache that can come with doing it yourself, and you’ll eliminate the huge price tag that comes with a consultant.
- We’ve calculated your savings, and we estimate that you will save over 90% compared to the cost of a consultant.
- We will meet with you regularly – will tell you where to start, what the next steps are, and how to resolve any issues you may face. You can meet via email, subscribe to our newsletter or through any other means at your convenience.
- Reach out to us at any time during your implementation project with unlimited email support, and have your questions answered by us within 24 hours.
- Once you complete your documents, let us review them – we’ll provide you with feedback and indicate what needs to be improved.
PACKAGES AVAILABLE FOR ORDER
DOCUMENTATION TOOLKIT. ONLINE OR MEMORY STICK
Price - R 2,950.00
53 document templates compliant with POPI & PAIA
Bonus: Access to Assent Compliance’s Learning Centre for 12 months
Unlimited email support for 1 year
1 hour of one-on-one support
Expert review of 1 completed document by email
WE PERFORM YOUR POPI IMPLEMENTATION & COMPLIANCE PROJECT
Contact us for price
Unlimited email support for 1 year
We agree on a full project plan implementation and internal control management procedure
Option: Outsourcing of Information Officer’s role**.
1 hour of one-on-one support
Expert review of 1 completed document by email
** Information Officer (IO) as a service is a practical and cost-effective solution for organisations that don’t have the requisite information protection expertise and knowledge to fulfil their IO obligations under the Protection of Personal Information Act, 2014 (POPI).
By outsourcing IO tasks and duties to a managed service provider, you get access to expert advice and guidance that helps you to address the compliance demands of POPI while staying focused on your core business activities.
Other POPI / PAIA Compliance Services
Information Officer as a Service
IO as a service is a practical and cost-effective solution for organisations that don’t have the requisite information protection expertise and knowledge to fulfil their Information Officer (IO) obligations under the Protection of Personal Information Act, 2014 POPI and the PAIA Act. By outsourcing IO tasks and duties to a managed service provider, you get access to expert advice and guidance.
Privacy Awareness Training
At Assent Compliance (Pty) Ltd we think one of the most important elements of your privacy compliance journey will be training you biggest assets, your staff. As we all know fines from the Information Regulator will be a result of a data breaches. Cyber-attacks are a potential risk, the majority of data breaches will occur due to human error. We regularly run POPI training courses and also provide inhouse training, specifically tailored for your organisation.
POPI Advisory Services
Assent Compliance (Pty) Ltd offer an impartial Advisory Service to organisations in Large, Medium and Small Organisations seeking expert guidance to ensure their organisations comply with the POPI legislation. These retained advisory services are available to any organisation. We specialize in legal compliance and is able to make clear recommendations for achieving your future compliance goals. Please contact us for more information.